Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FUmgKINc4tit6ipcFutBomlMhcs.roa
File: FUmgKINc4tit6ipcFutBomlMhcs.roa (raw, json)
Hash identifier: RXou51tCVduN5hiC2isGKv48qzblLYYdVMzh95KuD/Y=
Subject key identifier: 15:49:A0:28:83:5C:E2:D8:AD:EA:2A:5C:16:EB:41:A2:69:4C:85:CB
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0187389531D91AE6598081984337262DDDA7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FUmgKINc4tit6ipcFutBomlMhcs.roa
Signing time: Fri 31 Mar 2023 16:51:54 +0000
ROA not before: Fri 31 Mar 2023 16:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 270026
IP address blocks: 141.136.57.0/24 maxlen: 24
141.136.56.0/24 maxlen: 24
181.41.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:95:31:d9:1a:e6:59:80:81:98:43:37:26:2d:dd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 31 16:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1549a028835ce2d8adea2a5c16eb41a2694c85cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:2d:a7:23:ca:55:78:54:9f:06:54:3e:97:
51:f2:df:54:78:79:99:7f:8d:f2:08:b1:8d:2c:e2:
06:b6:9f:41:b6:c3:83:21:b9:71:cd:92:5a:21:19:
48:ad:f3:fa:90:2a:ea:8f:46:cf:3a:aa:d4:70:93:
e3:b5:8b:a4:cd:6f:00:5f:9f:07:a6:5d:d5:d7:9f:
fd:16:05:51:17:13:77:27:6b:52:5e:8a:76:10:7e:
df:0c:f7:80:24:ea:ee:b8:44:7b:95:74:be:de:07:
b4:5b:ff:91:39:73:11:b7:3d:79:1b:ff:95:e1:41:
cd:95:c0:ce:e0:9f:2e:ef:80:72:04:04:46:8b:81:
aa:ce:ae:12:ee:6e:30:15:0f:88:b4:86:4b:2f:45:
a6:3e:16:42:dc:77:db:61:c2:a8:06:3d:ad:0f:cb:
60:cc:ce:2e:70:36:07:e5:f5:f5:23:63:03:7b:96:
30:77:ba:6c:f4:0b:52:44:e8:6b:1e:0c:0d:61:1f:
9c:a8:1b:cb:76:ba:f0:09:b4:9b:02:9a:8c:70:64:
52:6c:d8:ea:60:f0:35:5b:be:d7:3d:c3:cc:75:55:
d5:ce:a8:37:89:aa:d3:08:90:b3:dd:08:13:90:02:
0a:31:2a:3d:e5:fd:a4:96:bb:f8:e4:7f:d7:9a:d4:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:A0:28:83:5C:E2:D8:AD:EA:2A:5C:16:EB:41:A2:69:4C:85:CB
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FUmgKINc4tit6ipcFutBomlMhcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.56.0/23
181.41.155.0/24
Signature Algorithm: sha256WithRSAEncryption
67:29:e3:9c:74:a0:cb:b2:c0:d2:78:df:f7:97:5f:32:5d:56:
bb:05:a4:f5:d1:ec:8c:24:74:a6:f7:01:f0:c3:b2:79:e4:ce:
ed:e2:d1:b6:24:95:23:0d:8a:e1:7f:50:2b:29:af:a3:0d:31:
0c:68:ea:80:0c:5c:98:fc:56:1e:6a:5b:e7:75:f9:52:10:e6:
70:d7:2b:1b:52:a7:61:b8:16:b4:3f:a3:99:66:6e:cb:22:46:
81:48:81:cc:b2:e2:a1:a2:b2:61:55:27:41:a9:a7:6c:fb:3e:
e2:02:ba:3f:90:00:19:36:3a:26:d8:b0:ba:c6:36:2f:78:2e:
e9:bc:b3:d9:71:94:8d:99:51:0d:40:b1:c0:8f:fb:34:2e:82:
e3:3f:d9:07:c5:f2:de:99:0c:83:30:9c:ea:61:46:a5:58:f9:
1a:42:6b:c4:d5:91:bf:e0:a9:2d:ac:33:02:14:d9:ba:5e:ec:
eb:4c:01:70:e4:f2:fe:d8:ad:3e:8d:2b:2a:5d:21:70:80:22:
b7:ce:a6:2e:a1:10:39:65:ef:45:9c:5f:cd:59:73:ef:e3:c1:
25:54:83:3b:33:43:81:64:7b:83:6d:76:d7:07:71:a5:c3:88:
34:d5:ef:7a:02:46:aa:c6:e6:77:6a:6a:5a:38:b0:ad:f0:91:
a3:f9:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org